captive portal auth with saml support ?
-
such as okta or other saml provider.
-
While not exactly what you're after, and I have not used this myself, Okta does have an on-prem RADIUS Agent; see https://help.okta.com/oie/en-us/Content/Topics/integrations/getting-started-about-radius.htm
This could allow the pfSense Captive Portal to Auth against Okta without pfSense native SAML support.
-
@darnoldvcs If pfSense have native saml support,the user can make the most of captive portal with other 2FA,such as casdoor and other SSO solution.
The pfSense can be the NAC.